CubeCart 3.0.44.3.6 - ProductID SQL Injection

CubeCart 3.0.44.3.6 - ProductID SQL Injection source: https://www.securityfocus.com/bid/37065/info CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CubeCart 3.0.4/4.3.6 - 'ProductID' SQL Injection

source: https://www.securityfocus.com/bid/37065/info CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities

Basic Analysis and Security Engine BASE is prone to multiple input- validation vulnerabilities because it fails to adequately sanitize user- supplied input. These vulnerabilities include an SQL-injection issue, a cross-site scripting issue, and a local file-include issue. Exploiting these issues...

OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - search.php Cross-Site Scripting

OpenDocMan 1.2.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues cou...

PHP Live! 'deptid' Parameter SQL Injection Vulnerability

PHP Live! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Joomla! Component SportFusion 0.2.x - SQL Injection

Joomla! Component SportFusion 0.2.x - SQL Injection source: https://www.securityfocus.com/bid/36481/info The SportFusion component 'comsportfusion' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection

source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Joomla! Component JoomlaFacebook - SQL Injection

source: https://www.securityfocus.com/bid/36484/info The JoomlaFacebook component 'comfacebook' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Vastal I-Tech Cosmetics Zone - view_products.php SQL Injection

Vastal I-Tech Cosmetics Zone - viewproducts.php SQL Injection source: https://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

WX-Guestbook 1.1.208 - SQL Injection HTML Injection

WX-Guestbook 1.1.208 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/41741/info WX-Guestbook is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage thes...

MyBB 1.4.8 - search.php SQL Injection

MyBB 1.4.8 - search.php SQL Injection source: https://www.securityfocus.com/bid/36460/info MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

tourismscripts HotelBook - hotel_id Multiple SQL Injections

tourismscripts HotelBook - hotelid Multiple SQL Injections source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

Joomla! Component com_pressrelease - id SQL Injection

Joomla! Component compressrelease - id SQL Injection source: https://www.securityfocus.com/bid/36351/info The 'compressrelease' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

tourismscripts HotelBook - 'hotel_id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

FlexCMS 2.5 - CookieUsername Cookie SQL Injection

FlexCMS 2.5 - CookieUsername Cookie SQL Injection source: https://www.securityfocus.com/bid/36179/info FlexCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

FlexCMS 2.5 - 'CookieUsername' Cookie SQL Injection

source: https://www.securityfocus.com/bid/36179/info FlexCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...